Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked.Check if you run itEPSS 0.43%Sep 25, 2025
- Medium5.4Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode.Check if you run itEPSS 0.23%Sep 25, 2025
- Medium5.3pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().Check if you run itEPSS 0.32%Sep 25, 2025
- Medium5.3In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.Check if you run itEPSS 0.45%Sep 25, 2025
- Medium5.3In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.Check if you run itEPSS 0.40%Sep 25, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- High7.7Horilla is a free and open source Human Resource Management System (HRMS).Check if you run itEPSS 0.29%Sep 24, 2025
- Medium4.3A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gatewayCheck if you run itEPSS 0.17%Sep 24, 2025
- Medium4.3A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 80Check if you run itEPSS 0.12%Sep 24, 2025
- Medium6.9In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by PuppetCheck if you run itEPSS 0.19%Sep 24, 2025
- High8.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.Check if you run itEPSS 0.26%Sep 24, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection.Check if you run itEPSS 0.24%Sep 24, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection.Check if you run itEPSS 0.24%Sep 24, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection.Check if you run itEPSS 0.24%Sep 24, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue.Check if you run itEPSS 0.24%Sep 24, 2025
- Low3.3NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference.Check if you run itEPSS 0.16%Sep 24, 2025
- Medium4.2NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions.Check if you run itEPSS 0.14%Sep 24, 2025
- Critical9.8The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due tCheck if you run itEPSS 0.37%Sep 24, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event Currently, in ath12k_service_ready_ext_event(),Check if you run itEPSS 0.15%Sep 24, 2025
- Critical9.8The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it.Check if you run itEPSS 0.49%Sep 24, 2025
- Medium4.3Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.24%Sep 24, 2025
- Medium6.5A vulnerability exists in the 'counterpart' library for Node.js and the browser due to insufficient sanitization of user-controlled input in translation key processing.Check if you run itEPSS 0.48%Sep 24, 2025
- Medium5.3A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method.Check if you run itEPSS 0.36%Sep 24, 2025
- Medium6.5A prototype pollution vulnerability exists in the ts-fns package versions prior to 13.0.7, where insufficient validation of user-provided keys in the assign function allows attackeCheck if you run itEPSS 0.43%Sep 24, 2025
- High7.5The messageformat package, an implementation of the Unicode MessageFormat 2 specification for JavaScript, is vulnerable to prototype pollution due to improper handling of message kCheck if you run itEPSS 0.40%Sep 24, 2025
Sort